Privacy Policy
Last updated: 29 September 2026
1. Introduction
Karmafy (“we”, “us”, “our”) operates the Parents Room Finder apps for iOS and Android and the website parentsroom.app (together, the “Service”) from Queensland, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy explains what we collect, why, who we share it with, and your choices. It applies to the apps and this website.
2. Information We Collect
2.1 Information you give us
- Account details: when you sign in with Apple or Google, the name, email address, and profile photo that provider shares with us. You can browse without an account; the app then uses an anonymous session that isn’t linked to your identity.
- What you contribute: rooms you share (name, address, map pin, what helped, and notes), photos, reviews and ratings, and reports.
- Messages: anything you send us by email.
2.2 Information collected as you use the Service
- Location: your precise location while the app is open, only if you allow it. We use it to show rooms near you and to place a room you share on the map. We don’t collect location in the background.
- Searches: the map area you search (coordinates and radius) and how many rooms were found, stored with your account to help us see where rooms are missing.
- Place search: the suburb or address you type into search.
- Server logs: IP address, request times, and app version, used for security and troubleshooting.
- On your phone: rooms you save, including their details and photos, are stored on your device so they work offline.
The apps contain no analytics, advertising, or crash-reporting tools. This website sets no cookies and runs no analytics.
2.3 Information from others
- Apple and Google: sign-in details as described above, when you choose to sign in with them.
- App stores: if you choose to support the app, Apple or Google handles the payment. We never receive your card details. The app checks your purchase status on your device; we don’t store it.
3. How We Use Information
- Running the Service: signing you in, finding rooms near you, showing room details, and keeping your saved rooms.
- Community features: publishing the rooms, photos, and reviews you share. A room a parent adds shows “Verification needed” until three other parents have reviewed it and no report about it is open.
- Checking content: photos are checked by OpenAI as soon as you add them in the app, before anything is published or stored. A photo that doesn’t pass isn’t kept. Room details and reviews are checked by OpenAI when you submit them.
- Finding rooms: our discovery tools use Anthropic’s Claude to find publicly listed parent rooms. They don’t use your personal information.
- Safety: handling reports and preventing abuse, fraud, and spam.
- Support and legal: answering your messages and meeting our legal obligations.
We don’t sell personal information, and we don’t send marketing.
4. Who We Share It With
We share personal information only as needed for the purposes above:
| Provider | Purpose | What they receive |
|---|---|---|
| Google (Firebase Authentication, Google Sign-In) | Signing in | Email, name, account identifiers |
| Apple (Sign in with Apple, App Store) | Signing in, app distribution, optional support purchases, ratings | Sign-in details; purchase and rating data under Apple’s policies |
| Apple Maps (iOS) and Google Maps (Android) | Showing the map | The map area you view |
| Google Play | App distribution, optional support purchases, ratings | Purchase and rating data under Google’s policies |
| Microsoft Azure | Hosting, database, and photo storage | All Service data, encrypted at rest |
| OpenAI | Checking photos and text | Photos you add; room details and reviews you submit |
| OpenStreetMap Foundation (Nominatim) | Address search, and turning a map pin into an address | What you type in search; map coordinates |
| Anthropic | Discovering public parent-room listings | No personal information |
We may also disclose information if the law requires it, or to protect the safety of people using the Service.
5. Overseas Data Transfer (APP 8)
Our main database and photo storage are hosted by Microsoft Azure in Australia. Some providers process information overseas:
- United States: Google, Apple, and OpenAI
- United Kingdom and the European Union: OpenStreetMap Foundation
We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, and we remain accountable for these disclosures.
6. Data Storage and Security (APP 11)
- Data is encrypted in transit (TLS) and at rest (Azure encryption).
- Photos are kept in private storage. Uploads use short-lived links that only work for that upload.
- Sign-in is handled by Firebase Authentication. We never see your Apple or Google password.
- Access to personal information is limited to the people who run the Service.
No method of storing or sending data is completely secure, but we work to protect your information.
7. Keeping and Deleting Your Information
We keep your account information while your account is active. You can delete your account at any time:
- In the app: Account → Delete account
- Without the app: on our account deletion page
- By email: info at karmafy dot com dot au
Deleting your account removes your account, your Apple or Google sign-in link, your saved rooms, reviews, comments, and reports, and the photos you uploaded. Rooms you shared stay listed without your name, so other parents can still find them. Search history is kept without any link to you. We aim to complete email requests within 30 days. We may keep information where the law requires it.
8. Access and Correction (APP 12 and APP 13)
You can ask to see the personal information we hold about you, or to correct it. Contact us using the details in section 15. We’ll respond within 30 days, and if we refuse a request we’ll explain why in writing.
9. Anonymity (APP 2)
You can browse rooms without an account. Signing in with Apple or Google is needed to share rooms, add photos, write reviews, save rooms, and report problems, so we can keep community content trustworthy.
10. Children’s Privacy
Parents Room Finder is for parents and caregivers, not for children. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we’ll delete it.
11. Cookies and Tracking
The apps don’t include analytics, advertising, or crash-reporting tools, and this website sets no cookies. The website loads its fonts from Google Fonts, so Google receives your IP address when you open a page. Saved rooms are stored only on your device.
12. Direct Marketing (APP 7)
We don’t send marketing. If that changes, we’ll only do so with your consent, and every message will include a way to opt out, in line with the Spam Act 2003 (Cth).
13. Notifiable Data Breaches
If an eligible data breach is likely to cause serious harm, we’ll notify the Office of the Australian Information Commissioner (OAIC) and the people affected as soon as practicable, as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.
14. Complaints
If you think we’ve mishandled your personal information, contact us using the details in section 15. We’ll acknowledge your complaint within 7 days and aim to resolve it within 30 days.
If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
15. Contact Us
For questions about this policy, or to make an access, correction, or deletion request:
- Operator: Karmafy, Queensland, Australia
- Email: info at karmafy dot com dot au
16. Changes to This Policy
We may update this policy. For material changes we’ll let you know in the app or by email before they take effect. The date at the top shows when it last changed.